hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lefty Leverenz (JIRA)" <>
Subject [jira] [Updated] (HIVE-17609) Tool to manipulate delegation tokens
Date Mon, 16 Oct 2017 20:58:00 GMT


Lefty Leverenz updated HIVE-17609:
    Labels: TODOC2.2 TODOC2.4  (was: )

> Tool to manipulate delegation tokens
> ------------------------------------
>                 Key: HIVE-17609
>                 URL:
>             Project: Hive
>          Issue Type: Improvement
>          Components: Metastore, Security
>    Affects Versions: 2.2.0, 3.0.0
>            Reporter: Mithun Radhakrishnan
>            Assignee: Mithun Radhakrishnan
>              Labels: TODOC2.2, TODOC2.4
>             Fix For: 3.0.0, 2.4.0, 2.2.1
>         Attachments: HIVE-17609.1-branch-2.2.patch, HIVE-17609.1-branch-2.patch, HIVE-17609.1.patch,
> This was precipitated by OOZIE-2797. We had a case in production where the number of
active metastore delegation tokens outstripped the ZooKeeper {{jute.maxBuffer}} size. Delegation
tokens could neither be fetched, nor be cancelled. 
> The root-cause turned out to be a miscommunication, causing delegation tokens fetched
by Oozie *not* to be cancelled automatically from HCat. This was sorted out as part of OOZIE-2797.
> The issue exposed how poor the log-messages were, in the code pertaining to token fetch/cancellation.
We also found need for a tool to query/list/purge delegation tokens that might have expired
already. This patch introduces such a tool, and improves the log-messages.

This message was sent by Atlassian JIRA

View raw message